Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier: Cdo4NnVGMw+IwqHB8UncJLIteSOVEHKpl59X/FtgaEs=
Subject key identifier: EF:67:60:B6:17:60:04:0C:AD:0F:A0:79:B0:D9:89:FE:49:AF:78:FD
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 019D3752BA20FEE793150E07CD9A8B6BAC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number: 176A
Signing time: Sun 29 Mar 2026 02:01:01 +0000
Manifest this update: Sun 29 Mar 2026 02:01:01 +0000
Manifest next update: Mon 30 Mar 2026 02:01:01 +0000
Files and hashes: 1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: NQsxlfFh8dPNGE8v8Jbh0t5XUgfcX+99bxBBxHZO7dQ=)
2: HSSEA9Em0ptRddp4bZHLYz47Pwc.roa (hash: tCTQJ4a04Vb+F29LJgpWJiZhzVqLIw989oQi9ddJVUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ba:20:fe:e7:93:15:0e:07:cd:9a:8b:6b:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Mar 29 02:01:01 2026 GMT
Not After : Mar 30 02:01:01 2026 GMT
Subject: CN=ef6760b61760040cad0fa079b0d989fe49af78fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:9b:96:84:80:e6:b4:99:e9:7f:e6:e6:90:
e7:3a:1b:4a:02:12:cc:c8:51:78:3e:39:de:d2:ed:
4b:9f:d5:c1:4d:e5:f0:62:87:f1:24:cc:dd:a0:2c:
20:40:32:80:8a:51:c9:a3:a3:76:97:3e:dd:80:53:
db:e3:b3:90:a6:c7:01:aa:c3:14:9e:7a:81:b1:27:
1c:b5:88:63:43:40:54:a2:67:4f:18:36:84:f2:6c:
3d:f2:e0:ed:d7:8b:d8:f2:45:09:6e:73:77:50:b9:
1b:f0:c6:4c:5a:cf:63:07:2b:4d:2f:18:ee:33:ac:
50:9c:90:d1:0f:a2:77:41:65:35:54:a8:62:6e:f2:
aa:75:9f:f1:da:17:ba:e1:e7:da:20:e4:73:50:6d:
1a:a5:96:ef:67:f6:32:b5:f6:c6:bd:0a:df:cb:fe:
a1:7b:69:29:3f:51:75:03:1a:4b:84:94:bc:87:27:
90:b5:bd:57:f7:fc:af:67:b8:c0:1e:29:fb:aa:c9:
a7:c8:f3:52:0a:03:ab:eb:ba:a6:1c:7b:02:f9:62:
33:26:a4:3d:f9:d4:4b:dd:b4:53:0f:c5:dc:5f:c1:
60:8d:15:44:8e:85:f9:44:30:87:c4:78:5f:b8:be:
16:05:2e:e5:c0:f0:c9:53:e5:3f:5d:09:43:6e:be:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:67:60:B6:17:60:04:0C:AD:0F:A0:79:B0:D9:89:FE:49:AF:78:FD
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:78:58:67:83:ea:63:ad:f2:85:a5:78:9f:53:71:4b:82:27:
60:c0:c8:74:1e:cd:75:cd:1d:eb:39:5c:0d:28:c0:e1:49:31:
d9:4f:98:48:7c:45:f6:9d:8f:af:38:1e:34:66:b7:6a:8a:0e:
68:0a:53:3f:99:32:2b:10:7e:3e:ed:d1:58:27:60:72:55:c5:
58:89:48:51:3a:f6:8b:9c:34:d3:26:f7:d8:20:4b:40:36:0b:
b9:87:26:b1:63:19:e7:af:03:36:78:05:ff:ec:d5:2a:49:59:
5c:69:88:f4:77:6d:59:cb:4b:77:52:df:72:d9:8d:34:79:13:
b3:85:02:40:77:24:44:95:8c:60:2d:6c:1e:8b:23:dc:59:6a:
52:12:fe:7d:d6:f6:05:8a:78:c3:83:62:d6:8c:e5:2a:db:30:
49:7f:be:68:9c:41:09:5b:7c:41:7c:82:24:6e:ab:3b:5b:76:
8c:d4:71:52:74:a8:2f:11:de:c6:b2:93:47:97:4c:1a:3e:71:
e1:d6:41:37:12:6e:bb:1a:8a:e6:70:22:8b:77:88:ab:80:01:
23:a5:b1:4d:6e:df:ed:8e:19:62:c4:72:1c:4a:f7:27:24:f4:
30:5a:37:2c:a5:3f:13:fc:b6:a9:9d:79:5a:bc:ac:5b:6c:55:
9d:88:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:47 2026 by rpki-client